7b0e49784f9a5f19523c15c5834cd190aaa69be100ce409e87d646cd732f45cf

General

Target

7b0e49784f9a5f19523c15c5834cd190aaa69be100ce409e87d646cd732f45cf
Size

811KB
MD5

809d2338ab99948bc54e08f9598c4871
SHA1

439ed61223fef2c2e4dcdaffbfa49a28f5cb34aa
SHA256

7b0e49784f9a5f19523c15c5834cd190aaa69be100ce409e87d646cd732f45cf
SHA512

5b95645dc36609af6b5fdea31d867121d837e71bdf59501dcd0483d43fb4c692dc217ac846478420fb02c6c7aa3260b5aafb09f05dfb56fc736ff6bab053c34b
SSDEEP

12288:lkdwmE0AwV1dyqDLgY3xV1rLzbIY54HJYuHCo+QwecWniofybhj9XqdW6BhfTK:edwmE0A4tEQxnJ+ifQwec1ofK+W6a

Score

N/A

Malware Config

Signatures

Files

7b0e49784f9a5f19523c15c5834cd190aaa69be100ce409e87d646cd732f45cf
.exe windows x86

fea4ad19146f3f0d4593cd7790a8e520

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Imports

shell32

SHBrowseForFolderA
ShellAboutA
SHGetFolderPathA
Shell_NotifyIconW
ExtractIconA
FindExecutableA

kernel32

GetDiskFreeSpaceExA
SetCommState
InitializeCriticalSectionAndSpinCount
SetProcessAffinityMask
LoadLibraryA
GetThreadLocale
GetFileInformationByHandle
GetSystemDirectoryA
LoadResource
GetNamedPipeHandleStateA
Sleep
EnumSystemLanguageGroupsA
GetCurrentProcess
VirtualAlloc
OpenJobObjectW
FindFirstFileW

dnsapi

DnsQueryConfig
DnsReplaceRecordSetUTF8
DnsDhcpSrvRegisterTerm
DnsDhcpSrvRegisterInit
DnsQuery_W
DnsNameCompare_W
DnsStatusString
DnsValidateName_UTF8
DnsNotifyResolver
DnsQuery_UTF8
DnsNameCompareEx_W
DnsModifyRecordsInSet_UTF8
DnsValidateName_W
DnsRecordListFree

netapi32

NetWkstaUserEnum
NetShareAdd
NetUseEnum
NetUserModalsGet
DsEnumerateDomainTrustsW
NetQueryDisplayInformation
NetGetJoinInformation
NetServiceEnum

advapi32

RegDeleteValueW
AreAllAccessesGranted
ReportEventA
GetSidLengthRequired
LsaLookupNames
AddAuditAccessAce
RegNotifyChangeKeyValue
GetTraceEnableFlags
AreAnyAccessesGranted
OpenTraceW
AddAccessDeniedAce
RegFlushKey
QueryServiceStatusEx

Sections

.text
Size: 45KB - Virtual size: 44KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.mm
Size: 643KB - Virtual size: 1013KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 121KB - Virtual size: 121KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 510B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

fea4ad19146f3f0d4593cd7790a8e520

Headers

File Characteristics

Imports

shell32

kernel32

dnsapi

netapi32

advapi32

Sections

.text Size: 45KB - Virtual size: 44KB

.mm Size: 643KB - Virtual size: 1013KB

.rsrc Size: 121KB - Virtual size: 121KB

.reloc Size: 512B - Virtual size: 510B

.text
Size: 45KB - Virtual size: 44KB

.mm
Size: 643KB - Virtual size: 1013KB

.rsrc
Size: 121KB - Virtual size: 121KB

.reloc
Size: 512B - Virtual size: 510B